Legal
Privacy Policy
Effective October 9, 2026
This Privacy Policy explains how Kush Heaven Festival LLC (“Kush Heaven,” “we,” “us,” or “our”) collects, uses, shares and protects personal information when you visit kushheavenfest.com (the “Site”), contact us, or sign up for our email updates. It also describes the choices and rights available to you. By using the Site you agree to this Privacy Policy and to our Terms of Use.
1. The short version
- We collect only what you give us (your name, email address and message) plus the basic technical data every website receives (such as your IP address).
- We use it to answer you, to send the updates you asked for, and to keep the Site secure.
- We use Google Analytics to understand how the Site is used, with advertising features turned off, and only for visitors outside the EEA, UK and Switzerland. We do not sell your personal information and we do not share it for targeted advertising.
- You can unsubscribe, or ask us to access, correct or delete your information, at any time by emailing info@kushheavenfest.com.
2. Information we collect
Information you provide
- Contact form: your name, email address and the content of your message.
- Email sign-up: your email address.
- Correspondence: anything you include when you email us.
Information collected automatically
- Technical data: IP address, approximate location derived from the IP address (country), browser type and version (user-agent string), the pages requested, and the date and time of each request.
- Security data: signals used to detect automated abuse, such as request rates and form-timing checks. The Site does not use CAPTCHA services and does not fingerprint your device.
- Analytics data (Google Analytics 4): pages viewed, approximate location (city or region level), device, browser and operating system, screen size, referring site, session timing and interactions such as scrolling or button clicks, associated with a random identifier stored in a cookie. Google Analytics is configured without Google Signals and without advertising personalization, and Google truncates IP addresses before storing them. We load Google Analytics only for visitors outside the European Economic Area, the United Kingdom and Switzerland, and never when your browser sends a Global Privacy Control signal. Google processes this data as our service provider under the Google Ads Data Processing Terms; see how Google uses data from sites that use its services.
We do not use advertising cookies, tracking pixels, social-media plug-ins or session-replay tools. See our Cookie Policy.
Sources. We collect this information directly from you (the contact form, the sign-up form and your emails) and automatically from your browser and device, through our hosting provider, when you use the Site.
We do not knowingly collect sensitive personal information (such as government identifiers, precise geolocation, financial account details, health information, or information about your race, religion or sexual orientation). Please do not send it to us.
3. How we use information
- To respond to messages you send through the contact form or by email.
- To send event updates, announcements and related communications you signed up for.
- To operate, secure and improve the Site, including preventing spam, abuse and fraud.
- To comply with legal obligations, enforce our Terms of Use, and protect our rights and the safety of others.
Where the law requires a legal basis (for example for visitors in the European Economic Area, the United Kingdom or Switzerland), we rely on your consent (email updates), our legitimate interests (responding to you, securing the Site), and compliance with legal obligations.
4. How we share information
We share personal information only as described here:
- Service providers that process data on our behalf under contractual restrictions: Cloudflare, Inc. (hosting, content delivery, DNS and security), Plus Five Five, Inc. (Resend) (email delivery and subscriber management) and Google LLC (Google Workspace, the mailbox that receives your messages, and Google Analytics, our website analytics service).
- Legal and safety: when required by law, subpoena or court order, or when we believe disclosure is necessary to protect our rights, your safety or the safety of others, or to investigate fraud or abuse.
- Business transfers: if Kush Heaven is involved in a merger, acquisition, financing or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy.
We do not sell personal information and have not done so in the preceding 12 months. We do not share personal information for cross-context behavioral advertising. We do not sell or share the personal information of any consumer, including consumers under 16 years of age.
5. Email communications
If you sign up, we will send you a confirmation and then occasional updates about Kush Heaven Festival. Every message comes from info@kushheavenfest.com. You can stop at any time by replying with “unsubscribe” or emailing us; we will process your request promptly and in any event within 10 business days, as required by the CAN-SPAM Act. We may still send you non-marketing messages, such as a direct reply to a question you asked.
6. Data retention
- Contact messages: the message, together with the name, email address, IP address, country and browser type captured with it, is kept for up to 24 months from submission and then deleted automatically, unless we need it longer to resolve a dispute or comply with law.
- Email subscribers: your email address, and the IP address and country captured at sign-up, are kept until you unsubscribe or ask us to delete them. After you unsubscribe we keep a minimal suppression record so we do not email you again.
- Server and security logs held by our hosting provider: generally no more than 90 days unless needed to investigate abuse.
- Analytics data: Google Analytics retains event-level data for up to 14 months; aggregated reports may be kept longer.
7. Security
We use reasonable administrative, technical and physical safeguards, including encryption in transit (HTTPS), access controls, rate limiting and secure hosting. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
8. Your privacy rights
California residents (CCPA / CPRA)
If you are a California resident, you have the right to: (a) know what personal information we collect, use, disclose and sell or share, and to access it; (b) delete personal information we collected from you; (c) correct inaccurate personal information; (d) opt out of the sale or sharing of personal information (we do not sell or share, see Do Not Sell or Share My Personal Information); (e) limit the use of sensitive personal information (we do not collect it); and (f) not be discriminated against for exercising these rights.
Notice at collection. In the preceding 12 months we collected the following categories of personal information, for the purposes described in Section 3, retained as described in Section 6, and disclosed only to the service providers in Section 4:
| Category | Examples | Sold or shared? |
|---|---|---|
| Identifiers | Name, email address, IP address | No |
| Internet or network activity | Browser type, pages requested, request timestamps | No |
| Approximate geolocation | Country derived from IP address | No |
| Communications | Content of messages you send us | No |
| Analytics identifiers and usage data | Google Analytics cookie ID, pages viewed, device and browser type | No |
How to exercise your rights. Email info@kushheavenfest.com with the subject line “Privacy Request,” or use the contact form. We will verify your request by confirming control of the email address associated with the information. You may designate an authorized agent to act for you; we will ask the agent for written proof of authorization and may ask you to confirm the request directly. We will respond within 45 days and may extend by another 45 days when reasonably necessary, in which case we will tell you. We honor Global Privacy Control signals as a valid opt-out request.
Other U.S. states
Residents of states with comprehensive privacy laws (including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia) may have similar rights to access, correct, delete and obtain a copy of their personal information and to opt out of targeted advertising, sales and certain profiling. We do not engage in targeted advertising, sales or profiling. To exercise any right, or to appeal a decision, email info@kushheavenfest.com.
European Economic Area, United Kingdom and Switzerland
You have the right to access, rectify, erase, restrict or object to our processing of your personal data, the right to data portability, and the right to withdraw consent at any time. You may also lodge a complaint with your local supervisory authority. Our servers and service providers are located in the United States; where we transfer personal data from these regions we rely on appropriate safeguards such as standard contractual clauses implemented by our service providers.
Canada
You may request access to, or correction of, your personal information and withdraw consent, subject to legal and contractual restrictions, by emailing info@kushheavenfest.com.
9. Children and age
The event is for adults aged 21 and over, and the Site is intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, email info@kushheavenfest.com and we will delete it.
10. Third-party links
The Site links to social networks (Instagram, X, TikTok and YouTube). Those services have their own privacy policies, and we are not responsible for their practices.
11. Do Not Track and Global Privacy Control
We do not respond to browser “Do Not Track” signals because there is no industry standard for them. We honor the Global Privacy Control signal: when your browser sends it, we do not load Google Analytics and we treat it as a request to opt out of any sale or sharing of personal information.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version here with a new effective date, and for material changes we will provide additional notice where required by law.
13. Contact us
Questions or requests about privacy: info@kushheavenfest.com. You can also reach us through the contact form. Postal mail: Kush Heaven Festival LLC, 836 N La Fayette Park Pl, Los Angeles, CA 90026.